1. The document discusses introducing DevOpsSec which integrates security into the DevOps process. 2. It recommends making a plan for security, educating the entire team on security, and automating security testing and analysis within the continuous deployment pipeline. 3. The goal is to implement security earlier in the development process rather than as a last step, and establish a security-focused culture and team.

1. DevOps and Application Security
Shahee Mirza
Co-Founder : BEETLES
Twitter: @shaheemirza

2. DevOps?

3. But Where is the Security?

4. TRADITIONAL

5. QA and OPS: Devs:

6. Security is last task?
• Security Testing
• Firewall Configuration
• Source Code Analysis

7. Security Testing, Firewall configuration and
Code analysis – Takes time

8. But, the investor has no time

9. So, What have we got:

10. But, What we planned :

11. … is that end of everything?

12. Required: Security in DevOps

13. Welcome to DevOpsSec !!

14. But, How will I introduce DevOpsSec to my team?

15. Module 1: Make a plan for Security

16. Module 2: Connect entire Team

17. Module 3: Make a culture of Self-
Learning about Security for Devs + QA.

18. Module 4: Automate everything.

19. Develop
Code
Commit
Source
Control
Build
Trigger
Tests
Deploy
to
ProductionDeploy
to Test
Env
Report
&
Notify
Publish to
release
repository
Automatic
security
test
SCA
Test
Security within Continuous Deployment

20. Module 5: Build a Security Team

21. Now, you have…

22. Summary

23. 1. Make a plan for security
2. Educate your team
3. Integrate security into automatic build
process.

24. Thank you